Privacy Policy

1. Introduction

This Privacy Policy describes how Dusky ("we," "our," or "the service") handles information when you use our application. By using Dusky, you consent to the practices described in this policy.

Key Point: Dusky is designed with privacy in mind. We do not store your transcripts, screenshots, or conversation content. Solve requests pass through our own backend on their way to an AI provider, and are discarded once the answer is returned. The only personal data we keep is your account record.

2. Our Privacy Approach

What Makes Dusky Different

Dusky operates on a pass-through model:

• We do not store your transcripts. Audio is streamed directly from your device to the transcription provider (AssemblyAI), processed in real-time, and the transcript is returned to your device. It does not pass through our servers.
• We do not store your screenshots. Screen captures are sent to our backend, which forwards them to an AI provider for analysis. They are held only for the length of that request and then discarded.
• We do not store your conversations. A solve request — the transcript context, your CV, and the job description you added — passes through our backend so we can select the model and apply your plan. Nothing from it is written down.
• We do not store personal data beyond your account. We retain your email address and the subscription record attached to it, and nothing else about you.

Your interview content lives on your device. Everywhere else it is in flight, not at rest.

3. Information We Collect

3.1 Account Information

That's it. We do not collect names, addresses, phone numbers, or other personal identifiers.

3.1.1 Marketing Email Signups (Optional)

If you enter your email into the newsletter signup on our website:

• We store the email you provided, the source (e.g. website footer), and any UTM parameters from the visit for attribution.
• Purpose: to send you launch updates and interview-prep tips.
• You can unsubscribe at any time using the link in any email we send.
• You can also request permanent deletion of your marketing email by contacting [email protected].
• We record the IP address the request came from, purely to rate-limit that public form against abuse.
• This is separate from any account you create in the app — you can subscribe to marketing without an account, and vice versa.

3.2 Information We Do NOT Collect or Store

To be explicit about what we do not retain:

• Audio recordings - Streamed to AssemblyAI, never stored by Dusky
• Transcripts - Processed by AssemblyAI, returned to your device, never stored by Dusky
• Screenshots - Passed through our backend to an AI provider, never stored by Dusky
• AI conversations - Passed through our backend to an AI provider, never stored by Dusky
• Interview content - Never stored by Dusky
• Personal details beyond your account - Never collected

3.3 Technical Data

We may collect minimal technical data for service operation:

4. How Your Data Flows

Understanding the data flow is important:

Audio Processing

1. You speak
2. Audio streams from your device directly to AssemblyAI — it does not touch our servers
3. AssemblyAI returns transcript to your device
4. Transcript exists only on your device

Screen Processing

1. You capture a screenshot
2. The screenshot goes to our backend, which forwards it to an AI provider
3. AI provider returns analysis to your device
4. The screenshot is discarded when the request ends

AI Interactions

1. You request AI assistance
2. The request — transcript context, plus your CV and job description if you added them — goes to our backend, which picks the model for your plan and calls the provider
3. AI provider returns response to your device
4. Dusky does not store any part of this exchange

5. Third-Party Services

Your data is processed by these third-party services. You are responsible for reviewing their privacy policies:

Important: Each AI provider has its own data handling, retention, and training policies. Our backend chooses which provider handles a given request based on the response speed you selected and which providers are available, so your data may be subject to any of the policies above. We encourage you to review them.

6. Local Data on Your Device

Some data exists locally on your device:

You have full control over local data. Signing out wipes it — your CV and job description, saved conversations, session history, and screenshots on disk. You can also delete the Dusky data folder yourself, or remove the application.

7. Data Security

• All data in transit is encrypted using TLS
• Session history is encrypted at rest on your device — always, with no setting to turn it off
• Authentication uses industry-standard protocols via Supabase
• We do not store sensitive content, so there is minimal attack surface
• Local data remains on your device under your control

8. Your Rights

You have the right to:

• Access: Request confirmation of what data we hold (email address only)
• Deletion: Delete your account and all associated data
• Portability: Your content is already on your device
• Correction: Update your email address

To exercise these rights: [email protected]

For EU Residents (GDPR)

You have additional rights under GDPR including the right to lodge a complaint with a supervisory authority. Our legal basis for processing is legitimate interest (providing the service you requested) and consent.

For California Residents (CCPA)

You have the right to know what personal information we collect and to request deletion. We do not sell personal information.

9. Your Responsibilities

You are responsible for:

• Understanding that your audio and screen content is processed by third-party AI providers
• Reviewing the privacy policies of AI providers you use
• Ensuring you have appropriate consent or rights to capture audio and screens in your environment
• Managing and deleting local data on your device
• Complying with any applicable recording or privacy laws in your jurisdiction

10. Data Sharing

We do not sell your personal information.

We share data only:

• With third-party services as described above (to provide the service)
• If required by law, court order, or governmental request
• To protect our rights, property, or safety
• In connection with a merger or acquisition (with notice to you)

11. Children's Privacy

Dusky is not intended for users under 18 years of age. We do not knowingly collect information from minors. If we learn we have collected data from a minor, we will delete it promptly.

12. International Data Transfers

Data may be processed in countries other than your own, including the United States. By using Dusky, you consent to this transfer. We rely on standard contractual clauses and other lawful mechanisms for international transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the application or by email. Your continued use of Dusky after such notice constitutes acceptance of the updated policy.

14. Contact Us

For privacy questions or concerns: [email protected]

Summary